Privacy Policy

1. Who this policy covers

This Privacy Policy explains how TaBill (“TaBill”, “we”, “us”) collects, uses, stores, and protects your personal information when you use the TaBill application to prepare and file Travelling Allowance (TA) bills. TaBill is developed and operated by Prakash Parmar, Gandhinagar, Gujarat, India.

TaBill is a self-serve tool that individual government employees choose to use on their own initiative. It is not, at this time, an officially procured or department-mandated system.

2. Information we collect

Account information. Your name, email address, 10-digit mobile number, and a securely hashed password (we never store your password itself — see §6).

Profile and bill information you enter. To prepare your TA bills, TaBill stores the details you type in: designation, pay and grade pay, P.T.A., camp address / posting, bank account number, bank name, IFSC code, employee ID, and the journey details (dates, stations, class of travel, fares, mileage, daily allowance) for each bill you create. If you use TaBill as an operator filing bills on behalf of employees, the same categories of information for those employees.

Information collected automatically. When you sign in, we record the IP address and browser/device identifier (user agent) associated with that session, for security and fraud prevention. We keep a security log (an “audit log”) of authentication events — sign-ups, sign-ins, password changes, password resets, email changes, and account deletions — each tagged with the same IP/device information and a timestamp.

Cookies. TaBill uses three cookies, none for advertising or tracking across other websites: a session cookie that keeps you signed in, a language-preference cookie, and a large-text accessibility-preference cookie. See §8.

We do not use any third-party analytics, advertising, or tracking scripts.

3. How we use your information

We use the information above only to:

• create and secure your account, and let you sign in;
• pre-fill and generate your Travelling Allowance bills and their PDF output;
• let an operator, supervisor, or admin you are linked to review, forward, or approve a bill you have submitted, where TaBill's workflow features are used for that purpose;
• send you account-related email (see §7) — never marketing email;
• detect, investigate, and prevent fraud, abuse, or unauthorized access to your account; and
• comply with applicable law.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

4. Consent

By creating an account, you consent to this Privacy Policy under the Digital Personal Data Protection Act, 2023 (“DPDP Act”). You may withdraw consent at any time by deleting your account (§9); withdrawing consent means TaBill can no longer provide the service to you, since bill preparation depends on the information described in §2.

5. Who else can see your information

Linked accounts. If you link your account with an operator or supervisor (Linked Accounts / employee onboarding), that person can see the profile and bill information needed to manage or review bills on your behalf. You control this linkage and can remove it at any time from Linked Accounts.

Service providers. We use Supabase (database and authentication infrastructure) to store your information, and Resend (email delivery) solely to send you the account emails described in §7. Neither provider is authorized to use your information for any purpose other than providing that infrastructure to us.

We do not share your information with any other third party, and never for advertising.

6. How we protect your information

• Passwords are hashed with argon2id and never stored or logged in plain text.
• Sessions use a random, unpredictable token; the token itself is never stored — only a one-way hash of it — so a copy of our database does not expose usable session credentials.
• All traffic between your browser and TaBill is encrypted (HTTPS).
• Database access is restricted by row-level security: an account can only read or modify its own data (or, for a linked operator/supervisor, only the data the relationship legitimately grants access to).

Your data is stored with Supabase, whose infrastructure for this project is hosted in the Mumbai, India region.

7. Emails we send

TaBill sends only transactional, account-related email: confirming your email address at signup, a password-reset link if you request one, an invite link if an operator adds you as an employee, and a confirmation when you change your email address. We do not send newsletters, marketing email, or promotional content.

8. Cookies

None of these cookies are used for advertising, and none share data with any third party.

9. Your rights

Under the DPDP Act, 2023, you have the right to:

• Access the personal information we hold about you — view it any time on your Profile page;
• Correct inaccurate information — edit it directly on your Profile page;
• Erase your information — delete your account from the Profile page at any time. This permanently removes your profile, bills, journeys, and login details. We keep a record that the deletion happened — the date, a partially masked version of your email (e.g. p***h@gmail.com), and a one-way cryptographic fingerprint of your email/mobile. That fingerprint cannot be reversed back into your email or mobile number — it can only be compared against one you provide later, so we can confirm an exact match if you ever dispute or don't recognize an account deletion. This record is not used to contact you or for any other purpose;
• Withdraw consent — see §4; and
• Lodge a complaint with our Grievance Officer (§12) or, if unresolved, with the Data Protection Board of India.

10. Data retention

We keep your account and bill information for as long as your account is active. If you delete your account, the data described in §9 is removed immediately, except for the minimal security audit record described there, which we retain for a limited period to investigate potential fraud or abuse before it is purged.

11. Children

TaBill is intended for use by adult government employees and is not directed at, or knowingly used by, children.

12. Grievance Officer & contact

If you have a question, concern, or complaint about this policy or how your information is handled, contact our Grievance Officer:

Prakash Parmar
Email: support@tabill.in
Address: Gandhinagar, Gujarat, India

13. Changes to this policy

We may update this policy as TaBill's features change or as law requires. We will update the “Effective” date above when we do, and for material changes we will show a notice in the app.